Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa62cfa7-db50-30e2-a20f-3fea1daf9450.roa
File:                     aa62cfa7-db50-30e2-a20f-3fea1daf9450.roa (raw, json)
Hash identifier:          UwkGHEb9L9O0RIHNGDKbkv5UoQdgA15bKZ1ePi265Fw=
Subject key identifier:   49:3B:82:78:AF:66:F0:19:CB:13:60:2A:38:BC:D6:DA:B7:CF:2F:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858430A0943A077F2C7F79DD76940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa62cfa7-db50-30e2-a20f-3fea1daf9450.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     41264
IP address blocks:        104.133.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:43:a0:77:f2:c7:f7:9d:d7:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ee4f4b57-d47d-4a56-8bd2-78d875c2d10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:cc:02:38:93:64:2a:b2:3c:82:21:9a:95:
                    a2:ad:7c:61:24:74:ab:b5:75:9b:95:25:ec:6f:fe:
                    93:d9:f3:7a:28:c4:18:b1:8e:8c:5a:df:2b:6d:0e:
                    fa:8a:65:98:50:f4:a7:fe:33:2f:53:f9:17:9c:b8:
                    66:4c:d3:6d:15:4b:66:f1:15:0c:cc:35:db:60:ee:
                    3f:92:82:fa:94:4e:9c:f1:3d:24:24:d6:8c:c7:03:
                    2a:a7:2c:b5:ee:08:9e:21:b6:d3:cf:ab:9b:9f:85:
                    fd:7e:e7:ee:15:b5:41:d1:77:2c:c8:0a:a1:78:de:
                    eb:75:5a:42:56:95:4e:01:70:9d:e7:4f:13:66:15:
                    6f:8b:60:40:fd:2b:b1:e1:15:b9:c9:f2:ce:24:a1:
                    40:a9:39:be:d6:74:35:d0:85:25:a0:95:d8:df:7c:
                    f2:59:86:f4:06:3b:44:6a:cd:d3:71:2e:10:4c:c0:
                    97:2d:eb:84:f7:a7:a0:7b:f6:e9:ec:18:32:cc:64:
                    4c:4e:10:10:9a:a3:9e:12:b7:92:ea:10:a2:8b:44:
                    df:20:6e:37:b8:53:48:df:81:fb:c9:f2:93:1e:26:
                    a4:ec:b5:11:a2:e6:4f:e4:ff:44:13:a3:d3:6f:3a:
                    50:a6:e7:8b:4e:e8:6a:f0:d7:c4:7b:e5:da:d2:52:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:82:78:AF:66:F0:19:CB:13:60:2A:38:BC:D6:DA:B7:CF:2F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa62cfa7-db50-30e2-a20f-3fea1daf9450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9c:24:92:79:b0:47:9d:05:b5:4f:de:fc:be:e8:b9:c6:66:
         0d:68:03:74:29:c5:52:03:9c:5d:b1:b9:56:f6:fc:39:63:95:
         eb:93:1c:35:15:cc:06:ef:0e:9c:9a:a7:f4:c9:6b:df:e8:0c:
         b6:cb:8b:b0:cc:b0:7f:19:24:85:6f:59:8e:1a:f8:b1:3f:b0:
         20:f0:c7:78:45:ab:87:d5:2b:b4:ba:7e:21:5d:01:c9:9d:8e:
         28:32:c9:1b:40:d8:09:44:35:c8:02:c3:f2:3a:28:16:39:22:
         00:3f:37:c2:89:43:5b:63:7e:06:57:17:b7:c6:08:98:51:78:
         19:ea:a9:1b:f3:f1:c0:8f:88:41:2d:c6:da:d9:9b:2f:43:2f:
         79:ad:94:17:39:34:04:b8:87:0e:6b:fd:56:50:40:cd:cc:86:
         51:eb:a7:74:a9:bc:ed:54:05:29:bd:33:6a:24:73:20:a3:12:
         25:d0:26:63:2b:ec:b7:87:45:0a:17:ee:c0:45:b6:0a:f9:cd:
         dc:8b:9d:43:fa:8a:78:90:7d:65:a1:4c:c7:96:21:1f:7e:53:
         c5:6b:96:0b:d2:fa:17:bc:77:a6:68:5d:84:db:7b:bd:b3:a0:
         ab:2d:39:98:4d:49:30:67:2b:88:73:19:20:bb:ea:a5:f1:95:
         65:06:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----